CVE-2026-3679: Tenda FH451 QuickIndex formQuickIndex stack-based overflow
A vulnerability was identified in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex. Such manipulation of the argument mitlinktype/PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3679?
CVE-2026-3679 has a high severity rating due to its potential for stack-based buffer overflow exploitation.
How do I fix CVE-2026-3679?
To fix CVE-2026-3679, update the Tenda FH451 firmware to the latest version provided by the manufacturer.
What systems are affected by CVE-2026-3679?
CVE-2026-3679 affects the Tenda FH451 router running version 1.0.0.9.
Can CVE-2026-3679 be exploited remotely?
Yes, CVE-2026-3679 can be exploited remotely through manipulation of the formQuickIndex function.
What are the potential consequences of exploiting CVE-2026-3679?
Exploitation of CVE-2026-3679 could lead to unauthorized remote code execution on the affected device.